Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS211622.roa
File: AS211622.roa (raw, json)
Hash identifier: l/0w9XxB7d3FIhYUisXYmtRZ6X6kHgLJhH5ansCJL4U=
Subject key identifier: 9E:F2:17:10:C5:06:6B:2F:35:88:B9:30:5A:A8:79:CC:F6:47:9E:6A
Certificate issuer: /CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Certificate serial: 3EE6BB95983F6C6B863EDEDE7FA2ABAF406CE6F4
Authority key identifier: D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS211622.roa
Signing time: Sun 01 Jan 2023 23:59:11 +0000
ROA not before: Sun 01 Jan 2023 23:54:11 +0000
ROA not after: Sun 31 Dec 2023 23:59:11 +0000
asID: 211622
IP address blocks: 2a06:a005:860::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:e6:bb:95:98:3f:6c:6b:86:3e:de:de:7f:a2:ab:af:40:6c:e6:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12ea65dee9873b5dcf3c6c0224faea6fcb8aea6
Validity
Not Before: Jan 1 23:54:11 2023 GMT
Not After : Dec 31 23:59:11 2023 GMT
Subject: CN=9EF21710C5066B2F3588B9305AA879CCF6479E6A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:de:6d:a1:04:76:5b:28:9a:60:ec:30:2b:23:
cb:18:db:7e:0e:93:53:6f:68:6c:7d:32:0d:6b:ca:
30:68:ab:58:c3:cd:ce:10:66:3d:75:e7:8d:ec:cf:
66:3a:f5:55:14:e5:7d:f9:d5:85:02:b6:9e:72:28:
f1:3d:f9:7c:4d:d4:1e:73:a0:de:48:bd:5e:07:28:
64:d0:d4:0f:22:69:70:4c:8c:ff:74:48:6f:09:96:
50:29:59:ac:66:56:ff:c9:45:d2:dc:2a:9e:60:a9:
03:61:e9:9c:3c:8b:1c:93:ae:4d:d9:be:9c:ff:65:
bd:9c:8d:83:01:a8:e3:7a:16:60:60:51:06:df:e4:
da:ec:e2:50:5a:48:c7:90:f6:3b:35:13:52:c9:aa:
10:ec:88:2c:66:04:ff:9c:ef:ac:c4:be:fc:44:41:
b7:9b:63:bc:a2:2d:d3:12:a4:82:54:86:47:bb:cb:
82:f7:d4:c9:dd:b5:7e:36:45:5a:44:b7:21:3e:79:
65:e3:c4:cf:0f:df:4d:39:60:b4:a8:28:d7:2e:0d:
02:e8:db:b6:75:82:e2:eb:0b:f7:8e:79:4d:56:83:
30:71:5c:d8:1a:09:49:47:6f:e9:27:93:a7:20:e9:
8c:0f:f0:28:8b:39:69:93:27:93:87:9a:19:da:e3:
94:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:F2:17:10:C5:06:6B:2F:35:88:B9:30:5A:A8:79:CC:F6:47:9E:6A
X509v3 Authority Key Identifier:
keyid:D1:2E:A6:5D:EE:98:73:B5:DC:F3:C6:C0:22:4F:AE:A6:FC:B8:AE:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/D12EA65DEE9873B5DCF3C6C0224FAEA6FCB8AEA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S6mXe6Yc7Xc88bAIk-upvy4rqY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/2/AS211622.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a005:860::/44
Signature Algorithm: sha256WithRSAEncryption
70:1b:ab:11:dc:68:e2:cd:9c:0f:2b:79:b8:b6:6c:56:a7:1d:
00:d3:68:66:70:71:be:65:14:9c:34:d4:69:88:b9:e1:92:45:
a4:93:f4:af:89:47:e5:b5:29:38:a6:b6:1f:e4:e0:ca:2d:08:
22:cf:d8:7e:2c:8b:1e:d3:11:46:e2:fb:81:6a:37:05:7c:5a:
4b:2d:c7:b4:82:6e:09:a5:7a:9f:c0:94:10:4a:5d:ad:fe:b2:
f6:c9:06:a1:d5:42:a7:65:fa:cc:5b:aa:02:55:0c:4a:96:06:
a4:1a:26:65:ac:47:db:25:90:1c:56:f2:65:7e:d7:36:91:ff:
dc:9c:cb:57:96:2c:23:a0:82:82:78:a7:b9:74:da:c2:91:4a:
0b:72:7d:52:47:e8:10:d7:66:5b:e7:1b:29:42:f5:e4:f0:82:
6d:f3:47:21:4b:97:a4:dd:aa:81:27:f9:be:4a:bd:b9:2a:e0:
2e:15:21:43:d3:33:ba:15:36:1d:45:b2:14:27:24:f0:e5:2f:
94:3a:77:1e:0c:27:76:af:9c:35:ea:b2:fd:b5:42:75:20:40:
f3:e3:be:85:74:ae:b1:f8:34:fc:f1:08:1e:7b:c1:6f:87:fc:
29:08:28:ac:37:96:cd:fb:d0:58:55:01:84:4f:85:ff:6d:3e:
65:35:83:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:05:21 2024 by rpki-client on console-fra.rpki-client.org